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Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 
VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 
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The  boundary  between  malicious  and  benign 
is  fractally  complex 


(Source:  Sentar  Inc.'s  MATCH  project.) 


•  We  and  our  adversaries  •  Their  costs  are  low 
are  both  exploring  the  •  Ours  are  high 
boundary 
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Reduce  Human  Analysis  Time  -  Reduce  Costs 
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DARPA  Program  Analysis  Challenge 

A  second  way  to  participate  in  the  APAC  effort 
Open  to  all  comers 

A  chance  to  prove  your  program  analysis  chops 

Win  cash  .  p/\Rp/\  provides  a  set  of  mobile 
Early  2013  applications 

•  Bring  your  own  tools 

•  Set  time  limit 

•  Compete  to  label  each  app  as  malicious 
or  benign  most  accurately 
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